[ CVE-2026-21131 · Published 12 Oct 2026 ]
Vulnerability in Samsung Mobile Samsung Flow
CVSS 2.1
EPSS <1%No fix listed yet
[ Description ]Official description
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.